This vulnerability (CWE-269) in Check Point Gaia Portal enables an authenticated attacker who has read-only access to escalate privileges and execute commands as root. The CVSS 3.1 base score is 7.5, reflecting high impact on confidentiality, integrity, and availability. The attack vector is network-based, requiring low privileges but high attack complexity and no user interaction. No patch or official remediation guidance has been provided yet, and no known exploits are reported in the wild.

An attacker with read-only Gaia Portal privileges can gain root command execution, potentially leading to full system compromise, including unauthorized data access, system modification, and denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to Gaia Portal to trusted users only and monitor for suspicious activity consistent with privilege escalation attempts.